Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
HWID SyncSpoofer.rar
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
HWID SyncSpoofer.rar
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
SyncSpoofer.exe
Resource
win7-20231129-en
Target
HWID SyncSpoofer.rar
Size
2.3MB
MD5
bec32e154b97e234570053bf213d0fbe
SHA1
49ad2049440e1367c1f2a87d4c7c86510e7a29af
SHA256
dc28910bd758fccf7797669d2876da58d58c398d85cb77bf8e8066ba00448b09
SHA512
7aec0da86226e3f557b9d19c581837434814812e924098cccb351668d583d4bbc35610f03026a22ec561bfd6796f452d0518bc037b9d52c6c956aecb8af2087f
SSDEEP
49152:dhZZjfnQccWBLfqmRa7x9vp6vwFvD1ZAGFDHOhZbG3PXgL6F81+GaGGbl:drJrjdg6vwh3FkLC811M
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
:������8k�qVM�aB�9'������R�qJ�l�"���z���b�LO:����ş4�����e�:��J��ynY���FHÖ�2����O6tqt���k.��"�M��POd�Vs־�N�3���hn�YN|PJ���UB-ryk �E~�(Y=�ГѨ��X߱�D�}:K�h^Mdl�H�g�MaC�����X�բ��S2��T�hſɨ��'����LR�Q4������64���{q�L��s䫸�-Is���^YV�NJ!�����裃�&33a������!1I�18���R� ��\Ty��s}��mn�|����9��R����!4����=;������h��Z2����l�i>iqiݕ��t#�:�lP�?�}�VM��d��Y����7 �$X��~���`D��+���eY�O$Z41żh���<ԅ䌨w ���s��)��>���`2o�C ����~&�+^ϵy��q3�T[*�|z��[�!qW4#���|)F���J�2'!F�2%�)��>���%{d�G�|�S�_A�����m���y���"5`d5�'4����j� ���ÔTA��8�.�m��e����H���u�r�����Z|�tm*[7[2��L�xG� ����;��H 4���p� �cUo��t��n�09�6�wTf1��JX˷3����ѱ�=�@��b�Y�W~ ���ydt�"����<�g�^��;�V��%������:��O����v��|+�0 i�����g��u���U^�Ū��@!VѴ�`_a��I�=Ѥ�Nn|�n���� +c��n�Eq�Dq�tC�@��L(?�И'x��G�k%"_6~�u?.)������2���S�s�8'`���r�������ڪ�U�N������4�h�S��Rf�K��~��o�7|�XJ������*()EzTy�Z��I���������Pz}I9�d��r%Ip�ؕQ=Rm>�ބ�4�(��o������d�O��`Dl3�z�j"�A�����8/R1�_�x@���Rs���$(KI��m�PV�Q����x��f�5��s��ާ��X�"ﶾ��=}����=|����P���E���,�G\� V�6+�L�� �ma����3�t�Xnx4��4��a�g=�-��a���)}�_dK�ͽߜM�kS���y�3�[|���=� �xE�Ș��:y�֗����6�/f'A�i,?T\�T�����X�g��LT��/�&e_�(�1�t�sy/t����Q�S�3|�A���T��d$������`f8p���l4s����)�A�J��� G���]O�2�-�ܽ2_��y:�������x�.k,y�-<q'� ��S]hg��tE�n�.�������縮̓����AϷ��ګ.�����R��mP9\b*V�X�#�z�y������40�UOv���Ɵ�'�b�@��F�;�j�Ϳ��6������� ��Ɵ��6�i¹�=�Ѱm��.�Բ߽$�r�>=��GC֎���pm���5�dW��x���j�:��ʞJ�Mֻ[��'�\v���E�o:S��/���\��wS�$l���G��O�hz�W8�b��e��6h��\������pQOp ��Z��?W� �S�������9K �a��pӜ����� A�9��4 ?K� oQ��k<�k\�I�H��� ��ǯ���K��� "��Z�<�&w�5K^ ?)�f����w a=`�ߩ���~;?r�rI��Y��21�m�0�\�_w�0h&7h��5y�ǝ�)�` ����e@ᠫr%U5agM��Υ4���5����/!_��6ϱF,ßʁƛD/�B�1E߉��CT����u�o2��0���O�v�.G��K��3̛�k<���Z���V�ϝݳ�����X�e�fdh��\�� �1$�#��;[��͓��e�����q^�/Ȋ�9��P��^�F&^ $F�����%�N�z�%� �<oȋ���\з����$��q�ުC�Nv�1Gm���gm�� ��x�s�Ӷ̠>����m�1��v�*���8t&�ȅ���f#Y.xROe�J��$Vph��Jڤ�Ú�z�E?a�q� �.��58p�V,qp�X���2����k9�<��YCS��F9ʚFE��!HP꒚'��U��W�rL $�{q(�+f���h6�5�w~���I aGdtDw»���^�m�n�#i[G�48��"�a'\�v����lu��<�&��<����@{~vY�b����cҌ�@���8>�-_����G�l~����A�2⠩��~��5�0���fH�t3 �T��J ���*;�{,}S�� c2����)�z,k�*�t�#��r �� �d��q����� �̦?sQ�QK;M/����yS����=�ȼ�:��Lc�nUm�NS�1z�.��9��+�*�eF/��^8#E�3����1��e?0����NB�;�Y�ٻ��Ȥ��P��v����� �?/UrIZ���gv�$ӊm�6ޭ���Z��Y�0����(B��Ŭs����'�Pʪ�X0qTW\p�|��x��_�u������x4�!�( ���6.�3$\O\�����%-���%�p�^Dk���k�U5R9�R7g,d�-��n�:�$(5���h{oU����}5�8����������]����h�܊�C�A�+"�1���_9<Lg �8�2ЫG%�7�^��tzMmbȇ?Ĩ�Y� �:�L'�R�_���+2��6 ��� 4U�ʿ����ژ,R���f�����;���21$pj�������-���.aj�����������TşA���i?���f�/.~�#���v���z����P���,�mV��ְ��I��i)u��D��Nqf��e�)�;&�������:�!�-�kD`�h���t�,��˰�s��G�:����ޜ��������Y� ��t��Īw�{������@�&�G����,כ�)H��r̰ҋ��$Lm-��$����j��$���X�Է��zq�؛�H�t�=N��U� ���QZ��M�VUn4�}N��n��2
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE